Product by Klever-io
Klever-go
18 known vulnerabilities in Klever-go (Klever-io), 0 of them actively exploited (CISA KEV).
Key figures
18
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-54755 | Klever: Integer overflow in split-royalty validation enables unbounded minting of KLV (native token) | 9.6 | |
| High | CVE-2026-86064 | Klever-Go: /log controls global node logging | 8.6 | |
| High | CVE-2026-55764 | Klever-Go: SFT add-quantity `int64` overflow bypasses a finite per-nonce MaxSupply | — | |
| Critical | CVE-2026-54754 | Klever-io Klever-go: Integer Underflow (Wrap or Wraparound) | 9.6 | |
| High | CVE-2026-82405 | Klever-io Klever-go: Incorrect Authorization | — | |
| High | CVE-2026-55763 | Klever-Go: Percentage-transfer royalty skips the source debit at exactly-100% splits | — | |
| High | CVE-2026-86065 | Klever-io Klever-go: Allocation of Resources Without Limits or Throttling | 7.5 | |
| High | CVE-2026-82409 | Klever-io Klever-go: Improper Encoding or Escaping of Output | — | |
| High | CVE-2026-82407 | Klever-Go: Validator registration accepts an unvalidated BLS public key → consensus liveness DoS | — | |
| High | CVE-2026-82406 | Klever-Go: Zombie-order theft: `Buy` missing `IsClaimed` guard in native marketplace | — | |
| High | CVE-2026-52880 | Klever-Go: REST API slow-header connection exhaustion via Gin Engine.Run | 7.5 | |
| High | CVE-2026-52879 | Klever-Go: Unbounded goroutine spawn on direct-message ingress enables peer-driven DoS | 7.5 | |
| High | CVE-2026-52878 | Klever-Go: Unauthenticated nil-pointer DoS in P2P transaction validation can halt the chain | 7.5 | |
| High | CVE-2026-47249 | Klever-Go KVM: Hash-array amplification in P2P resolver request handling | 7.5 | |
| High | CVE-2026-44697 | Klever-Go MultiDataInterceptor: remote OOM via crafted compressed P2P payload | 8.6 | |
| Medium | CVE-2026-46403 | Klever-Go KVM read-only execution can commit contract delete and upgrade side effects | 6.3 | |
| Medium | CVE-2026-49343 | Klever-Go KVM: Throttler slot leak in trie account-data sync causes epoch bootstrap / state sync DoS | 5.9 | |
| High | CVE-2026-58262 | Klever-Go: PubKeysBitmap padding bits bypass the BLS signature quorum | — |